Boréal-Informations Stratégiques 2014 Inc

Borealis Stakeholder Engagement Software

Manage all aspects of stakeholder engagement from a single, intuitive tool. Borealis centralizes all stakeholder-related data, keeping it instantly accessible to team members from anywhere.

Easily add modules to the stakeholder engagement platform to manage other areas of corporate social responsibility such as social investment, land management, and grievance management.

Features

• Track all engagement with your key stakeholders
• Stakeholder mapping using configurable assessment axis
• Most advanced email integration (MS Outlook and Gmail)
• Google map integration for data visualization and stakeholder creation
• Online portal to receive stakeholder feedback (2-way dialogue)
• Smart communications to send personalized mass emails and print letters
• Chrome extension to easily collect stakeholder information from public sources
• Engagement plan to monitor progress on strategy
• Advanced live dashboards highly configurable by end-users
• Grievance management, Social investment, Land management

Benefits

• Meet your legal obligations for public consultation and consent
• Centralize your stakeholder data and comply with GDPR
• Engage strategically with your stakeholders based on their assessment
• Save data entry time using Outlook/gmail add-in, chrome extension
• Ensure all landowners are being properly engaged
• Monitor your engagement strategy in real-time
• Take decision using meaningful and live KPIs
• Receive feedback from external stakeholders and manage anonymous grievances
• Visualize and analyze your data using interactive map
• Manage social investment programs

£1,137 to £2,674 a user a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at francois.robichaud@boreal-is.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

738894393875442

Contact

Francois Robichaud
+1-819-446-4277
francois.robichaud@boreal-is.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Downtime for maintenance are defined within Borealis Master Subscription Agreement and are planned outside of client business hours.
• System requirements:
  • Browsers: Chrome, Firefox, Edge, Safari
  • Email add-on: Outlook, Gmail

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Helpcenter and support ticketing system available at all time.; Support offered from Monday to Friday.; Emergency email is available for clients and available at all time.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Borealis subscription includes support services online, by email and by phone.; ; During the onboarding, a dedicated project manager is guiding and supporting you to configure the platform according to your needs. Once onboarding is completed, a customer success advisor will be dedicated to your organization. You can contact your CSA for any question, support need or improvement request.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Borealis business analyst will configure the platform according to your organization needs to meet your objectives. Borealis also imports your historical data. A personalized training plan is then delivered in line with your use cases. Advanced training is also provided for Analytics reporting and administration of the platform by the local administrator. Documentation is provided to users for each training session.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: All data can be exported in Excel format. Attached documents can also be exported in batch with reference to each record. Geographical data can be exported in shapefile or kml format. All reports can also be exported in image formats and pdf.
• End-of-contract process: At the end of the contract, data remains accessible for download by the client for a period of 30 days. A detailed procedure is available for the client to extract their data.; ; In case, client asks Borealis to complete the export, fees are applicable.; ; After 30 days following the end of the contract, data is completely deleted.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Borealis Stakeholder Engagement software comes with a native mobile app for iOS and Android. The mobile app includes specific features such a business card scanner and an oofline mode to record interactions on the field without connection.; ; The web application is also designed to be used on any devices including large screens, laptops, tablets and smart phones.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Users can access the service interface online. The interface is configurable by user according to their access right levels.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Some of Borealis users are visually impaired and use high contrast mode, keyboard shortcuts and assistance with screen readers.
• API: Yes
• What users can and can't do using the API: API allows to post, get and delete data into all registers part of Borealis solution.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Borealis application is highly configurable including: fields and sections visibility, dropdown values, tooltips, report contents and design, notifications, reminders, map layers options.

Scaling

• Independence of resources: Scalable cloud-based infrastructure that dynamically allocates resources based on real-time demand. ; ; Load balancers distribute user requests across multiple servers, ensuring no single server becomes overwhelmed.; ; Quality of Service policies prioritize certain types of traffic or requests, ensuring critical operations are not impacted by high demand elsewhere.; ; Redundancy in systems to handle unexpected surges in demand or in case of system failure.; ; Continuous testing of the system's ability to handle high loads and monitoring performance to identify and address potential bottlenecks before they impact users.

Analytics

• Service usage metrics: Yes
• Metrics types: All logins statistics (username, login time, log out time).; Activities performed (create, update, read, delete, share, export, download).; Reports include detailed data and analytics charts and graphs for a better understanding of the data.
• Reporting types:
  • API access
  • Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can choose which records and fields to export. An embedded functionality is available for massive export in Excel format. For attached documents, the export is a compressed folder with the documents structured in folders for each record.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • PDF
  • Shapefile
  • KML
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Excel
  • VCards
  • Emails/Meetings
  • Shapefile

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Borealis guarantees an availability target of 99.5% for the online service. Availability is calculated monthly, excluding planned downtime and factors beyond Borealis' control. If this target isn't met for two consecutive months, clients can escalate the issue, and if unresolved to their satisfaction, terminate their agreement with Borealis with no liability after giving a seven-day notice. Service levels vary based on the severity of issues, with response and resolution times ranging from one hour to the next release, depending on priority level.
• Approach to resilience: Borealis uses multiple data centers to host its application; and data, providing essential redundancy. All data centers; employ physical security, strict access policies and secure; vaults and cages. Each server is replicated in real time to; a second availability zone in the same AWS region. Borealis; service performs near real-time data replication between; the production data center and the disaster recovery center.; Hot-site disaster recovery tests are performed daily, and; complete disaster recovery diagnostic is done quarterly to; verify our projected recovery times and the integrity of the; customer data.
• Outage reporting: Public dashboard; API; email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: The Borealis operations team in Canada monitors our infrastructure 24/7. We adhere to IT industry standards for access control, enforcing policies that manage user registration, access privileges, password protocols, and network service access. Our support team accesses hosted applications solely for maintenance or upon customer request, ensuring application health and performance. Access is restricted to security-qualified, authorized employees using two-factor authentication. Customers must maintain the security of their login credentials.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Interdigicert Europe SA CERTI-TRUST™ Group
• ISO/IEC 27001 accreditation date: 01-02-2023
• What the ISO/IEC 27001 doesn’t cover: Not applicable. All operations are within the scope of the certification.
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 2020-11-07
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: Our solution is collocated in dedicated spaces at a top-tier data center that maintains industry-standard certifications. This ensures our application meets rigorous security requirements. Third-party security audits of our product and infrastructure are done on a regular basis.
• PCI certification: Yes
• Who accredited the PCI DSS certification: Interdigicert Europe SA CERTI-TRUST™ Group
• PCI DSS accreditation date: 01-02-2023
• What the PCI DSS doesn’t cover: Not applicable. All operations are within the scope of the certification.
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Borealis adheres to stringent information security policies and processes as part of its ISO 27001:2017 certification. This includes risk assessments, confidentiality protocols, and robust security measures at various levels such as operations, applications, organization, and data centers. Their security approach incorporates patch monitoring, user monitoring, incident management, multi-tenant and multi-instance data segregation, and strong encryption practices. Borealis ensures compliance through regular reviews, third-party security assessments, and continuous monitoring for vulnerabilities. Organizational security is integrated into their culture and business processes, emphasizing change management, access control, and continuous improvement in security practices.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Lifecycle Tracking: Components of Borealis services are meticulously tracked from their inception through deployment and operational use.; ; Security Impact Assessment: Changes to the system are rigorously evaluated to understand their potential security implications. This ensures that any modifications do not adversely affect the overall security posture of the service.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Borealis' vulnerability management process involves regular assessments of potential threats to its services. This includes continuous monitoring of its infrastructure for vulnerabilities and deploying patches promptly upon identification. Borealis relies on industry-standard sources and third-party security experts for information about potential threats, ensuring their systems are protected against the latest security risks.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Borealis' protective monitoring process involves identifying potential compromises through a combination of real-time surveillance using SIEM (Security Information and Event Management) tools and regular security audits. Upon detecting a potential compromise, they respond swiftly with a structured incident management protocol to mitigate and rectify the issue. The response time is prompt, ensuring minimal impact on service and data integrity.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Borealis has a well-defined incident management process for common events, ensuring efficient handling and resolution. Users can report incidents through designated channels, such as a support email or phone line. Borealis provides incident reports detailing the nature, impact, and resolution of incidents, maintaining transparency and communication with its users.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  At Borealis, our dedication to fighting climate change is a cornerstone of our corporate philosophy, particularly in the deployment of our stakeholder engagement software. We are committed to implementing environmentally conscious practices in our G-Cloud service offering, which supports both our clients’ operational needs and their sustainability goals. Here is our detailed plan:; Energy-Efficient Infrastructure: Our cloud infrastructure is specifically optimized to reduce energy consumption. We deploy advanced virtualization technologies to enhance server utilization, reducing the physical hardware requirements and thereby minimizing our energy footprint.; Sustainable Practices and Client Engagement: We advocate for and implement sustainable practices within our operational processes. Our software facilitates enhanced reporting on environmental impact, enabling clients to make informed decisions that align with their environmental goals.; Continuous Improvement and Innovation: We are continuously exploring innovative ways to reduce our environmental impact. This includes staying abreast of technological advancements that can further decrease energy use and enhance the sustainability of our services.; Through these initiatives, Borealis reinforces its commitment to environmental stewardship and supports our clients in their efforts to combat climate change, aligning with global sustainability standards and contributing to a healthier planet.

  Covid-19 recovery

  At Borealis, our response to the COVID-19 pandemic is deeply integrated into our G-Cloud service offering, ensuring we support our clients and communities in navigating the complexities of recovery. Here’s how we plan to contribute:; Enhanced Connectivity: Recognizing the increased need for robust digital solutions during and post-COVID-19, our cloud-based stakeholder engagement software ensures seamless, secure, and efficient communication channels between organizations and their stakeholders, facilitating better crisis management and recovery strategies.; Support for Remote Work: Our platform is designed to support remote work environments comprehensively. By enhancing the capabilities for remote interaction, we help organizations maintain continuity and resilience, ensuring that employees can work effectively from any location, thereby reducing the risk of disruptions caused by health crises.; Economic Recovery Support: Borealis is committed to driving economic recovery by enabling organizations to engage more effectively with their communities and stakeholders. Our tools help identify and address the needs of those most impacted by the pandemic, fostering community-led recovery initiatives that are vital for long-term sustainability.; Health and Wellbeing Focus: Our platform supports initiatives aimed at improving the health and wellbeing of communities. We facilitate the dissemination of critical health information and support wellness programs that address both the physical and mental health challenges posed by the pandemic.; Through these focused actions, Borealis aims to not only aid in the immediate recovery from COVID-19 but also to build a foundation for sustainable, resilient community and organizational structures post-pandemic.

  Tackling economic inequality

  At Borealis, we recognize the pivotal role that technology can play in tackling economic inequality. Our G-Cloud services are designed to directly address disparities by fostering inclusivity and economic growth through the following strategic initiatives:; Access to Technology: We ensure equitable access to our stakeholder engagement software, prioritizing ease of use to empower communities and organizations.; Job Creation and Skills Development: Borealis is committed to creating employment opportunities within the tech sector and beyond.; Supporting Small Businesses and Startups: Our platform enhances the capabilities of small businesses and startups by providing them with advanced tools to manage stakeholder relationships more effectively. This support helps them scale, compete, and thrive even in competitive markets, thereby fostering economic resilience and growth.; Community Engagement and Development: Our software facilitates meaningful engagement between organizations and their stakeholders, enabling transparent communication and collaboration that address specific community needs and contribute to sustainable economic development.; Through these measures, Borealis not only addresses economic inequality but also promotes a more equitable economic environment, ensuring that the benefits of technological advancements are accessible to all segments of society.

  Equal opportunity

  At Borealis, we are steadfast in our commitment to fostering equal opportunity through our G-Cloud services. Our initiatives are designed to ensure that all individuals, regardless of background, have the chance to thrive and contribute meaningfully to their communities and industries. Here’s how we are addressing equal opportunity:; Diversity and Inclusion in Hiring: We prioritize diversity in our workforce, embracing a wide range of perspectives that enrich our corporate culture and enhance our products. We implement fair hiring practices that actively seek to reduce bias and promote equality, providing opportunities for people from underrepresented groups.; Accessible Technology: Our stakeholder engagement software is built with accessibility in mind. It is designed to be user-friendly for people with varying abilities, ensuring that everyone can participate fully without barriers. This commitment extends to continuous improvements based on user feedback to accommodate a spectrum of needs.; Through these focused efforts, Borealis is dedicated to creating a more equitable world where technology serves as a bridge rather than a barrier, promoting equal opportunities for all individuals across the societal spectrum.

  Wellbeing

  At Borealis, we prioritize wellbeing by integrating support for physical, mental, and social health into our G-Cloud services. Our approach includes:; Workplace Wellbeing: Our software encourages healthy work habits through functionalities that support remote or flexible work arrangements.; Community Engagement: Our platform enhances stakeholder engagement with tools for feedback, surveys, and collaboration, empowering communities to express and address their wellbeing needs.; Supporting Physical Health: We promote physical health through wellness challenges and partnerships with health-focused organizations.; Inclusive Design: We ensure our software is accessible to individuals with disabilities, fostering inclusivity and preventing social isolation.; Through these initiatives, Borealis is committed to using technology to enhance wellbeing for all users.

Pricing

• Price: £1,137 to £2,674 a user a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at francois.robichaud@boreal-is.com. Tell them what format you need. It will help if you say what assistive technology you use.